Beetles Cyber Security

Cybersecurity / Penetration Testing Servicesbeetles.io

Beetles Cyber Security is a CREST-, ISO 27001-, and ISO 20000-certified offensive security consultancy headquartered in Dhaka, Bangladesh, delivering manual penetration testing, red team simulations, and PenTest-as-a-Service via its proprietary CrowdSpark platform to enterprise and mid-market clients in financial services, telecom, manufacturing, and government.

Company typePrivate
Founded2017
HeadquartersDhaka, Bangladesh
Headcount11–50
GTM typeB2B
OfferingServices

What Beetles Cyber Security does

Beetles Cyber Security Ltd. is a Dhaka-headquartered, CREST-, ISO 27001-, and ISO 20000-certified offensive security consultancy founded in 2017 by ethical hackers Mohammed Muqeet Halim (CEO) and Shahee Mirza (CCOO). The firm delivers manual, exploitative penetration testing and red team adversary simulations across web applications, APIs, mobile apps, and network/server environments, applying established methodologies (OWASP Top 10/ASVS, MITRE ATT&CK, PTES, OSTMM, NIST SP 800-115). Service revenue is generated through project-based engagements (typically 2–4 weeks), an emerging PenTest-as-a-Service (PTaaS) subscription, red team simulations, GRC advisory for ISO/GDPR/financial/healthcare compliance, and standalone configuration reviews and vulnerability assessments.

The technology backbone is CrowdSpark, Beetles' proprietary AI-driven PenTest Engagement Management platform, which provides real-time vulnerability reporting as findings are validated, centralized dashboards, comprehensive analytics, and DevSecOps integration via APIs and webhooks into CI/CD pipelines and issue trackers. Beetles also employs a proprietary Beetles Risk Rating (BRR) scoring methodology in client deliverables. The company sells primarily through a consultative, sales-led motion (website contact, phone, customized proposal, engagement agreement, pre-engagement planning) supplemented by event-driven and community/research-led demand generation through the Beetles Blog, CVE disclosures (Kaspersky CVE-2020-28950, Trend Micro CVE-2020-15602, F5 Big-IP APM), and conference participation.

Beetles serves primarily enterprise and mid-market buyers in financial services, telecommunications, technology/SaaS, healthcare, manufacturing, government, and education/research, with named clients including bKash, Grameenphone, BRAC Bank, City Bank, BATB, BSRM, Robi Axiata, Khalifa University, CredibleX, and PEMO. Delivery is remote and on-site, with both Bangladesh-domestic execution and international reach (notably UAE). The company has completed over 1,800 pentests, identified over 3,000 vulnerabilities, and reports a 92% Net Promoter Score, while operating with a specialized team of 11–50 that includes certified red team researchers (OSCP, CEH, CISSP, CISM, GRTP) and a formal sales and marketing function.

Beetles Cyber Security firmographics

Firmographics

Name: Beetles Cyber Security
Legal name: Beetles Cyber Security Ltd.
Website: https://beetles.io
Company type: Private
Founded year: 2017
Operating status: Operating
Headcount range: 11–50 employees
Short description: Beetles Cyber Security is a CREST-, ISO 27001-, and ISO 20000-certified offensive security consultancy headquartered in Dhaka, Bangladesh, delivering manual penetration testing, red team simulations, and PenTest-as-a-Service via its proprietary CrowdSpark platform to enterprise and mid-market clients in financial services, telecom, manufacturing, and government.
Ownership category
akta.pro rank

Beetles Cyber Security industry classification

Industry

Product category: Cybersecurity / Penetration Testing Services
NAICS: Security Systems Services (56162), Investigation and Security Services (5616)
akta.pro primary industry: Vulnerability Management & Penetration Testing Services (BPAEADAD)
akta.pro secondary industry: Threat Intelligence, Hunting & Adversary Emulation (BPAKAHAE)

Keywords

Penetration testing services
Offensive security consulting
Vulnerability assessment
Red team operations
Security compliance advisory

Where Beetles Cyber Security is headquartered

Location

Headquarters

HQ city: Dhaka
HQ country: Bangladesh
HQ region: Asia

Offices1 record

Markets served

Beetles Cyber Security business model

Business model

GTM type: B2B
Offering type: Services
Cost components: Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

Penetration Testing Engagements (Web, API, Mobile, Network & Server): Standard, project-based penetration testing engagements typically running 2 to 4 weeks depending on target scope and size; each engagement covers web applications, APIs, mobile apps (iOS/Android), and network/server testing per engagement.
PenTest-as-a-Service (PTaaS) via CrowdSpark: Subscription-based continuous penetration testing service providing ongoing security assessments instead of one-off tests, real-time vulnerability reporting, continuous monitoring, predictable monthly costs, and scalable coverage aligned to client growth.
Red Team Threat Simulations: Adversarial simulation engagements that emulate sophisticated attacks in black-box testing scenarios to comprehensively test organizational defense capabilities and reveal security weaknesses.
GRC (Governance, Risk & Compliance) Advisory: Advisory services for ISO 27001, ISO 20000, GDPR, financial sector regulations, healthcare compliance standards, and custom industry frameworks.
Configuration Reviews and Vulnerability Assessments: Specialized assessment engagements including configuration reviews and broader vulnerability assessments delivered alongside penetration testing services.

Pricing tiers

Model	Billing	Price
Unit Pricing	Pay-as-you-go	Standardized unit-based pricing: 1 Beetles Unit = 35 hours of testing (1 pentester for 2 weeks)
Subscription	Monthly	PenTest-as-a-Service (PTaaS) subscription via CrowdSpark
Other	Multi-year contract	Standard Penetration Testing Engagement

Go-to-market motion4 records

Distribution channels3 records

Marketing channels7 records

Beetles Cyber Security product offering

Product offering

Core offering

Beetles Cyber Security is a CREST, ISO 27001, and ISO 20000 certified offensive security consultancy that delivers manual, exploitative penetration testing across web, API, mobile, network, and server environments, along with red team threat simulations and GRC advisory services. Its proprietary AI-driven CrowdSpark platform underpins a PenTest-as-a-Service (PTaaS) subscription model that delivers real-time vulnerability reporting, DevSecOps integration, and centralized engagement management.

Product overview

Beetles Cyber Security is a CREST, ISO 27001, and ISO 20000 certified offensive security consultancy whose portfolio is anchored by its proprietary CrowdSpark platform, which serves as the engagement management and analytics backbone for the PenTest-as-a-Service (PTaaS) subscription model. Layered on top of CrowdSpark are four core hands-on service lines — Web, API, and Mobile Application Pentesting; Network & Server Pentesting; Red Team Threat Simulations; and PenTest-as-a-Service (PTaaS) — supplemented by Configuration Reviews, Vulnerability Assessments, and GRC Advisory Services for ISO 27001, ISO 20000, GDPR, financial sector, and healthcare compliance. Together, CrowdSpark's continuous, AI-driven reporting and DevSecOps integrations unify the testing offerings into a single subscription-style delivery model rather than a portfolio of disconnected one-off engagements.

Differentiator

Problem solved

Functional benefit

Brands

CrowdSpark: Proprietary AI-driven PenTest-as-a-Service (PTaaS) and PenTest Engagement Management platform developed by Beetles, offering continuous penetration testing, real-time vulnerability reporting, analytics, DevSecOps integration, and centralized engagement management.

Products and services

Web, API, and Mobile Application Pentesting Manual, exploitative penetration testing of web applications, APIs, and mobile apps (iOS and Android) conducted against OWASP Top 10 and OWASP ASVS frameworks to surface vulnerabilities that automated scanners miss. Delivered to enterprise clients across financial services, telecom, healthcare, technology, and government.
Network & Server Pentesting
Red Team Threat Simulations
PenTest-as-a-Service (PTaaS)
CrowdSpark Platform
GRC Advisory Services
Configuration Reviews
Vulnerability Assessments

Companies that use Beetles Cyber Security

Customer profile

Named customers10 records

Segments7 records

Ideal customer profiles4 records

Beetles Cyber Security technology and API

Technology

Technology focussed Yes

API detail

Has API: Yes
API docs
API detail

Core technology

AI maturity

App detail

AI capability3 records

Feature5 records

Beetles Cyber Security partnerships and signals

Strategic signal

Partnerships

Six partnerships are on record, tiered core and minor.

CRESTcoreStrategic or Co-development PartnerBeetles is an organization-level CREST-accredited offensive security consultancy. CREST accreditation signals alignment with internationally recognized standards for penetration testing and provides the institutional trust signal required by enterprise, financial, and government clients. Logo is displayed prominently on the company's About page and website header.
KasperskyminorStrategic or Co-development PartnerBeetles' Red Team discovered and disclosed a 0-day vulnerability (CVE-2020-28950) in Kaspersky Anti-Ransomware Tool (KART) due to an unsafe DLL search path, leading to privilege escalation. Kaspersky acknowledged the research and published the advisory. The disclosure demonstrates a research-level relationship rather than a commercial partnership.
Trend MicrominorStrategic or Co-development PartnerBeetles discovered a critical RCE vulnerability (CVE-2020-15602) in Trend Micro Security consumer product during a client engagement, then responsibly disclosed to Trend Micro. Trend Micro acknowledged the finding, published the advisory, and the vulnerability was listed in the CVE database. Relationship is research-level rather than commercial.
F5 NetworksminorStrategic or Co-development PartnerBeetles discovered a vulnerability in F5 Big-IP Access Policy Manager that allowed malicious DLL injection and privilege escalation on Windows systems, then disclosed to F5. F5 acknowledged, published the advisory, and the finding was listed in the CVE database. Relationship is research-level rather than commercial.
OWASPcoreTechnology or IntegrationBeetles applies OWASP Top 10 and OWASP ASVS frameworks in its web, API, and mobile application penetration testing services, and follows the OWASP Testing Guide methodology. OWASP standards are embedded into Beetles' testing approach and deliverables.
MITREcoreTechnology or IntegrationBeetles uses the MITRE ATT&CK framework for threat modeling and adversary simulation in its network/server penetration testing and red team engagements.

Scale indicators7 records

Recent moves6 records

Expansion highlights6 records

Beetles Cyber Security competitors and assessment

Company assessment

Direct peers

Bishop Fox: Bishop Fox is a research-driven offensive security firm providing pentesting, red teaming, and adversary simulation — comparable to Beetles in hacker-led culture, research output, and enterprise client base.
HackerOne: HackerOne is a leading bug bounty and pentest platform that connects organizations with a global researcher community — overlapping with Beetles' ethical-hacker roots and offensive security positioning.
Synack: Synack operates a crowdsourced, AI-augmented PTaaS platform with vetted researchers and enterprise-grade reporting — directly comparable to Beetles' hacker-led, AI-driven CrowdSpark model.
Cyberis: Cyberis is a UK offensive security consultancy providing penetration testing, red teaming, and threat simulation — comparable to Beetles in service mix and regulated-enterprise buyer profile.
NetSPI: NetSPI is an enterprise offensive security consultancy offering pentesting, red teaming, and vulnerability management with its own PTaaS-style platform — closely comparable in service mix and buyer profile.
Pentest People: Pentest People is a UK-based CREST-accredited offensive security consultancy offering pentesting-as-a-service with a portal-based delivery model — comparable in CREST accreditation and recurring-revenue service model.
Cobalt: Cobalt is a PenTest-as-a-Service platform providing on-demand, continuous pentesting with a global crowdsourced researcher network and CI/CD integrations — a direct competitor to Beetles' CrowdSpark PTaaS offering.

Broad incumbents

Trustwave: Trustwave provides managed security, penetration testing, and GRC services to large enterprises — comparable to Beetles' pentesting and GRC advisory lines, though with a much broader portfolio.
NCC Group: NCC Group is a large global cybersecurity consultancy offering offensive security, GRC advisory, and managed services — a broader incumbent comparable in service breadth and regulated-industry reach.
SecureWorks: SecureWorks (a Dell Technologies company) is a global MSSP offering offensive security testing, threat intelligence, and managed detection — comparable in offensive security services and enterprise/government customer profile.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

Beetles Cyber Security compliance and trust

Trust signal

Compliance4 records

Beetles Cyber Security financial estimates

Financial estimate

Revenue estimate

Valuation estimate

Beetles Cyber Security leadership team

Management profile

Number of profiles

Profiles15 records

Beetles Cyber Security funding detail

Funding detail

Funding overview

Funding rounds1 record

Investors1 record

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

Beetles Cyber Security M&A and investment

M&A and investment

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Beetles Cyber Security

What does Beetles Cyber Security do?

Is Beetles Cyber Security a public or private company?

Beetles Cyber Security is a private company. It is classified as founder individual operated bootstrapped and is currently operating.

When was Beetles Cyber Security founded?

Beetles Cyber Security was founded in 2017. It employs 11 to 50 people.

Where is Beetles Cyber Security based?

Beetles Cyber Security is headquartered in Dhaka, Bangladesh, in the Asia region.

How does Beetles Cyber Security make money?

Five revenue lines are on record. Penetration Testing Engagements (Web, API, Mobile, Network & Server) is the primary driver. The others are penTest-as-a-Service (PTaaS) via CrowdSpark, red Team Threat Simulations, GRC (Governance, Risk & Compliance) Advisory and configuration Reviews and Vulnerability Assessments.

Who are Beetles Cyber Security's main competitors?

Direct peers on record are Bishop Fox, HackerOne, Synack, Cyberis, NetSPI, Pentest People and Cobalt. Broad incumbents are Trustwave, NCC Group and SecureWorks.

Does Beetles Cyber Security have an API?

Yes. CrowdSpark platform offers API integrations and webhooks that connect to CI/CD pipelines, issue tracking systems, and collaboration tools, enabling developers to integrate security testing into their development workflow, automate scheduling, push findings into issue tracking, and trigger remediation workflows in real time.

What industry is Beetles Cyber Security in?

Beetles Cyber Security's product category is Cybersecurity / Penetration Testing Services. Its primary akta.pro industry code is BPAEADAD, Vulnerability Management & Penetration Testing Services, with a secondary code of BPAKAHAE, Threat Intelligence, Hunting & Adversary Emulation. Its NAICS code is 56162.